Privacy-focused public blockchain Iron Fish announced it is terminating all support for its network after discovering a critical inflation vulnerability in its core code. The team detected unusual activity involving wIRON and the ChainPort cross-chain bridge, which led to an investigation confirming the root cause lay within the Iron Fish blockchain itself.
The vulnerability traces back to a 2019 commit in the Merkle tree implementation, where a subtle flaw in how note nullifiers were calculated allowed attackers to reuse the same note multiple times. Despite being within the scope of both internal and external audits, the bug went undetected until exploited through the ChainPort bridge. Iron Fish has submitted a fix patch along with a detailed post-mortem report before archiving the codebase.
In its statement, the team warned that software unable to be upgraded instantly remains extremely vulnerable as the ability to find and exploit complex code vulnerabilities becomes increasingly commoditized across the crypto industry.
Iron Fish Shuts Down Privacy Blockchain After Merkle Tree Vulnerability Exploited via ChainPort Bridge
免責事項: Phemexニュースで提供されるコンテンツは、あくまで情報提供を目的としたものであり、第三者の記事から取得した情報の正確性・完全性・信頼性について保証するものではありません。本コンテンツは金融または投資の助言を目的としたものではなく、投資に関する最終判断はご自身での調査と、信頼できる専門家への相談を踏まえて行ってください。
